RFC 9591
The Flexible Round-Optimized Schnorr Threshold (FROST) Protocol for Two-Round Schnorr Signatures, June 2024
- File formats:
- Also available: XML file for editing
- Status:
- INFORMATIONAL
- Authors:
- D. Connolly
C. Komlo
I. Goldberg
C. A. Wood - Stream:
- IRTF
Cite this RFC: TXT | XML | BibTeX
DOI: https://doi.org/10.17487/RFC9591
Discuss this RFC: Send questions or comments to the mailing list cfrg@irtf.org
Other actions: Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 9591
Abstract
This document specifies the Flexible Round-Optimized Schnorr Threshold (FROST) signing protocol. FROST signatures can be issued after a threshold number of entities cooperate to compute a signature, allowing for improved distribution of trust and redundancy with respect to a secret key. FROST depends only on a prime-order group and cryptographic hash function. This document specifies a number of ciphersuites to instantiate FROST using different prime-order groups and hash functions. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 8729.